From f56d98d12cfdc5c960cab1eec86f55d6675ee41c Mon Sep 17 00:00:00 2001 From: CBL-Mariner Servicing Account Date: Thu, 14 Nov 2024 05:05:17 +0000 Subject: [PATCH 1/3] Kernel upgrade to 5.15.169.1 version --- .../kernel-azure-signed.spec | 5 ++++- .../kernel-hci-signed/kernel-hci-signed.spec | 5 ++++- SPECS-SIGNED/kernel-signed/kernel-signed.spec | 7 +++++-- .../hyperv-daemons.signatures.json | 2 +- SPECS/hyperv-daemons/hyperv-daemons.spec | 5 ++++- SPECS/kernel-azure/config | 2 +- SPECS/kernel-azure/config_aarch64 | 2 +- .../kernel-azure/kernel-azure.signatures.json | 6 +++--- SPECS/kernel-azure/kernel-azure.spec | 5 ++++- SPECS/kernel-hci/config | 2 +- SPECS/kernel-hci/kernel-hci.signatures.json | 4 ++-- SPECS/kernel-hci/kernel-hci.spec | 5 ++++- .../kernel-headers.signatures.json | 2 +- SPECS/kernel-headers/kernel-headers.spec | 7 +++++-- SPECS/kernel/config | 2 +- SPECS/kernel/config_aarch64 | 2 +- SPECS/kernel/kernel.signatures.json | 6 +++--- SPECS/kernel/kernel.spec | 7 +++++-- cgmanifest.json | 20 +++++++++---------- .../manifests/package/pkggen_core_aarch64.txt | 2 +- .../manifests/package/pkggen_core_x86_64.txt | 2 +- .../manifests/package/toolchain_aarch64.txt | 2 +- .../manifests/package/toolchain_x86_64.txt | 4 ++-- 23 files changed, 65 insertions(+), 41 deletions(-) diff --git a/SPECS-SIGNED/kernel-azure-signed/kernel-azure-signed.spec b/SPECS-SIGNED/kernel-azure-signed/kernel-azure-signed.spec index bf62a473e8c..39e9dc09271 100644 --- a/SPECS-SIGNED/kernel-azure-signed/kernel-azure-signed.spec +++ b/SPECS-SIGNED/kernel-azure-signed/kernel-azure-signed.spec @@ -9,7 +9,7 @@ %define uname_r %{version}-%{release} Summary: Signed Linux Kernel for Azure Name: kernel-azure-signed-%{buildarch} -Version: 5.15.167.1 +Version: 5.15.169.1 Release: 1%{?dist} License: GPLv2 Vendor: Microsoft Corporation @@ -153,6 +153,9 @@ ln -sf linux-%{uname_r}.cfg /boot/mariner.cfg %exclude /module_info.ld %changelog +* Thu Nov 14 2024 CBL-Mariner Servicing Account - 5.15.169.1-1 +- Auto-upgrade to 5.15.169.1 + * Wed Sep 18 2024 CBL-Mariner Servicing Account - 5.15.167.1-1 - Auto-upgrade to 5.15.167.1 diff --git a/SPECS-SIGNED/kernel-hci-signed/kernel-hci-signed.spec b/SPECS-SIGNED/kernel-hci-signed/kernel-hci-signed.spec index 6bf9056ad53..d2470dbf92d 100644 --- a/SPECS-SIGNED/kernel-hci-signed/kernel-hci-signed.spec +++ b/SPECS-SIGNED/kernel-hci-signed/kernel-hci-signed.spec @@ -4,7 +4,7 @@ %define uname_r %{version}-%{release} Summary: Signed Linux Kernel for HCI Name: kernel-hci-signed-%{buildarch} -Version: 5.15.167.1 +Version: 5.15.169.1 Release: 1%{?dist} License: GPLv2 Vendor: Microsoft Corporation @@ -149,6 +149,9 @@ ln -sf linux-%{uname_r}.cfg /boot/mariner.cfg %exclude /module_info.ld %changelog +* Thu Nov 14 2024 CBL-Mariner Servicing Account - 5.15.169.1-1 +- Auto-upgrade to 5.15.169.1 + * Wed Sep 18 2024 CBL-Mariner Servicing Account - 5.15.167.1-1 - Auto-upgrade to 5.15.167.1 diff --git a/SPECS-SIGNED/kernel-signed/kernel-signed.spec b/SPECS-SIGNED/kernel-signed/kernel-signed.spec index 8e161b9d5d8..b584718a804 100644 --- a/SPECS-SIGNED/kernel-signed/kernel-signed.spec +++ b/SPECS-SIGNED/kernel-signed/kernel-signed.spec @@ -9,8 +9,8 @@ %define uname_r %{version}-%{release} Summary: Signed Linux Kernel for %{buildarch} systems Name: kernel-signed-%{buildarch} -Version: 5.15.167.1 -Release: 2%{?dist} +Version: 5.15.169.1 +Release: 1%{?dist} License: GPLv2 Vendor: Microsoft Corporation Distribution: Mariner @@ -153,6 +153,9 @@ ln -sf linux-%{uname_r}.cfg /boot/mariner.cfg %exclude /module_info.ld %changelog +* Thu Nov 14 2024 CBL-Mariner Servicing Account - 5.15.169.1-1 +- Auto-upgrade to 5.15.169.1 + * Wed Oct 23 2024 Rachel Menge - 5.15.167.1-2 - Bump release to match kernel diff --git a/SPECS/hyperv-daemons/hyperv-daemons.signatures.json b/SPECS/hyperv-daemons/hyperv-daemons.signatures.json index 63c71897dd8..2c12cc5ebc7 100644 --- a/SPECS/hyperv-daemons/hyperv-daemons.signatures.json +++ b/SPECS/hyperv-daemons/hyperv-daemons.signatures.json @@ -7,6 +7,6 @@ "hypervkvpd.service": "c1bb207cf9f388f8f3cf5b649abbf8cfe4c4fcf74538612946e68f350d1f265f", "hypervvss.rules": "94cead44245ef6553ab79c0bbac8419e3ff4b241f01bcec66e6f508098cbedd1", "hypervvssd.service": "22270d9f0f23af4ea7905f19c1d5d5495e40c1f782cbb87a99f8aec5a011078d", - "kernel-5.15.167.1.tar.gz": "2f529a3abf4167d1de5f7dd73043827db2c08d647d924990843ee914b0558ee0" + "kernel-5.15.169.1.tar.gz": "e74c0bb5e8485983275af9a1c8ccdc5155217e8a2b824281146df1d04f2d315e" } } diff --git a/SPECS/hyperv-daemons/hyperv-daemons.spec b/SPECS/hyperv-daemons/hyperv-daemons.spec index d94f05433ee..317ff5b4c82 100644 --- a/SPECS/hyperv-daemons/hyperv-daemons.spec +++ b/SPECS/hyperv-daemons/hyperv-daemons.spec @@ -8,7 +8,7 @@ %global udev_prefix 70 Summary: Hyper-V daemons suite Name: hyperv-daemons -Version: 5.15.167.1 +Version: 5.15.169.1 Release: 1%{?dist} License: GPLv2+ Vendor: Microsoft Corporation @@ -219,6 +219,9 @@ fi %{_sbindir}/lsvmbus %changelog +* Thu Nov 14 2024 CBL-Mariner Servicing Account - 5.15.169.1-1 +- Auto-upgrade to 5.15.169.1 + * Wed Sep 18 2024 CBL-Mariner Servicing Account - 5.15.167.1-1 - Auto-upgrade to 5.15.167.1 diff --git a/SPECS/kernel-azure/config b/SPECS/kernel-azure/config index 10615306ef2..4631cc56e99 100644 --- a/SPECS/kernel-azure/config +++ b/SPECS/kernel-azure/config @@ -1,6 +1,6 @@ # # Automatically generated file; DO NOT EDIT. -# Linux/x86_64 5.15.167.1 Kernel Configuration +# Linux/x86_64 5.15.169.1 Kernel Configuration # CONFIG_CC_VERSION_TEXT="gcc (GCC) 11.2.0" CONFIG_CC_IS_GCC=y diff --git a/SPECS/kernel-azure/config_aarch64 b/SPECS/kernel-azure/config_aarch64 index e52cf7dc401..aa1df1e2a87 100644 --- a/SPECS/kernel-azure/config_aarch64 +++ b/SPECS/kernel-azure/config_aarch64 @@ -1,6 +1,6 @@ # # Automatically generated file; DO NOT EDIT. -# Linux/arm64 5.15.167.1 Kernel Configuration +# Linux/arm64 5.15.169.1 Kernel Configuration # CONFIG_CC_VERSION_TEXT="gcc (GCC) 11.2.0" CONFIG_CC_IS_GCC=y diff --git a/SPECS/kernel-azure/kernel-azure.signatures.json b/SPECS/kernel-azure/kernel-azure.signatures.json index d7d95e0ee6a..d865b41c6b0 100644 --- a/SPECS/kernel-azure/kernel-azure.signatures.json +++ b/SPECS/kernel-azure/kernel-azure.signatures.json @@ -1,9 +1,9 @@ { "Signatures": { "cbl-mariner-ca-20211013.pem": "5ef124b0924cb1047c111a0ecff1ae11e6ad7cac8d1d9b40f98f99334121f0b0", - "config": "97d9d65905746afb5c23e03bc0d5c4c2703f1701ffb61031dda00e8541ecf185", - "config_aarch64": "616ea3ccfdf311b10a2702e7eac052f561fb0556a94b0c5e1b72c6293fca5083", + "config": "e0a9d6b3f4234ce45367dbe3d903639320a1e527a941248c0f84f37e12fdaac5", + "config_aarch64": "45a4e313a3777a6003d955e655fa8deaf8af3a8939df825b39b568975357da87", "sha512hmac-openssl.sh": "02ab91329c4be09ee66d759e4d23ac875037c3b56e5a598e32fd1206da06a27f", - "kernel-5.15.167.1.tar.gz": "2f529a3abf4167d1de5f7dd73043827db2c08d647d924990843ee914b0558ee0" + "kernel-5.15.169.1.tar.gz": "e74c0bb5e8485983275af9a1c8ccdc5155217e8a2b824281146df1d04f2d315e" } } diff --git a/SPECS/kernel-azure/kernel-azure.spec b/SPECS/kernel-azure/kernel-azure.spec index f20f660ec2b..090fd00680e 100644 --- a/SPECS/kernel-azure/kernel-azure.spec +++ b/SPECS/kernel-azure/kernel-azure.spec @@ -27,7 +27,7 @@ Summary: Linux Kernel Name: kernel-azure -Version: 5.15.167.1 +Version: 5.15.169.1 Release: 1%{?dist} License: GPLv2 Vendor: Microsoft Corporation @@ -420,6 +420,9 @@ ln -sf linux-%{uname_r}.cfg /boot/mariner.cfg %{_sysconfdir}/bash_completion.d/bpftool %changelog +* Thu Nov 14 2024 CBL-Mariner Servicing Account - 5.15.169.1-1 +- Auto-upgrade to 5.15.169.1 + * Wed Sep 18 2024 CBL-Mariner Servicing Account - 5.15.167.1-1 - Auto-upgrade to 5.15.167.1 diff --git a/SPECS/kernel-hci/config b/SPECS/kernel-hci/config index e0d9c89a206..1b8d19b5caa 100644 --- a/SPECS/kernel-hci/config +++ b/SPECS/kernel-hci/config @@ -1,6 +1,6 @@ # # Automatically generated file; DO NOT EDIT. -# Linux/x86_64 5.15.167.1 Kernel Configuration +# Linux/x86_64 5.15.169.1 Kernel Configuration # CONFIG_CC_VERSION_TEXT="gcc (GCC) 11.2.0" CONFIG_CC_IS_GCC=y diff --git a/SPECS/kernel-hci/kernel-hci.signatures.json b/SPECS/kernel-hci/kernel-hci.signatures.json index 50e01ad2585..7d22bec4339 100644 --- a/SPECS/kernel-hci/kernel-hci.signatures.json +++ b/SPECS/kernel-hci/kernel-hci.signatures.json @@ -1,7 +1,7 @@ { "Signatures": { "cbl-mariner-ca-20211013.pem": "5ef124b0924cb1047c111a0ecff1ae11e6ad7cac8d1d9b40f98f99334121f0b0", - "config": "05cee91e9e1f815e6bf8cebfb5866aeef51e849e41b0c37834d9e0c5a09cea59", - "kernel-5.15.167.1.tar.gz": "2f529a3abf4167d1de5f7dd73043827db2c08d647d924990843ee914b0558ee0" + "config": "c5449325bcd31990b7f42e7d8165bb9f6482f15b5a552fac2003a452344d80b1", + "kernel-5.15.169.1.tar.gz": "e74c0bb5e8485983275af9a1c8ccdc5155217e8a2b824281146df1d04f2d315e" } } diff --git a/SPECS/kernel-hci/kernel-hci.spec b/SPECS/kernel-hci/kernel-hci.spec index 7ad05b0fff0..b414ec7818c 100644 --- a/SPECS/kernel-hci/kernel-hci.spec +++ b/SPECS/kernel-hci/kernel-hci.spec @@ -17,7 +17,7 @@ %define config_source %{SOURCE1} Summary: Linux Kernel for HCI Name: kernel-hci -Version: 5.15.167.1 +Version: 5.15.169.1 Release: 1%{?dist} License: GPLv2 Vendor: Microsoft Corporation @@ -547,6 +547,9 @@ ln -sf linux-%{uname_r}.cfg /boot/mariner.cfg %{_sysconfdir}/bash_completion.d/bpftool %changelog +* Thu Nov 14 2024 CBL-Mariner Servicing Account - 5.15.169.1-1 +- Auto-upgrade to 5.15.169.1 + * Wed Sep 18 2024 CBL-Mariner Servicing Account - 5.15.167.1-1 - Auto-upgrade to 5.15.167.1 diff --git a/SPECS/kernel-headers/kernel-headers.signatures.json b/SPECS/kernel-headers/kernel-headers.signatures.json index e96ab9d2c7a..00185475695 100644 --- a/SPECS/kernel-headers/kernel-headers.signatures.json +++ b/SPECS/kernel-headers/kernel-headers.signatures.json @@ -1,5 +1,5 @@ { "Signatures": { - "kernel-5.15.167.1.tar.gz": "2f529a3abf4167d1de5f7dd73043827db2c08d647d924990843ee914b0558ee0" + "kernel-5.15.169.1.tar.gz": "e74c0bb5e8485983275af9a1c8ccdc5155217e8a2b824281146df1d04f2d315e" } } diff --git a/SPECS/kernel-headers/kernel-headers.spec b/SPECS/kernel-headers/kernel-headers.spec index 490821e1c1f..24a09ec0020 100644 --- a/SPECS/kernel-headers/kernel-headers.spec +++ b/SPECS/kernel-headers/kernel-headers.spec @@ -11,8 +11,8 @@ Summary: Linux API header files Name: kernel-headers -Version: 5.15.167.1 -Release: 2%{?dist} +Version: 5.15.169.1 +Release: 1%{?dist} License: GPLv2 Vendor: Microsoft Corporation Distribution: Mariner @@ -73,6 +73,9 @@ done %endif %changelog +* Thu Nov 14 2024 CBL-Mariner Servicing Account - 5.15.169.1-1 +- Auto-upgrade to 5.15.169.1 + * Wed Oct 23 2024 Rachel Menge - 5.15.167.1-2 - Bump release to match kernel diff --git a/SPECS/kernel/config b/SPECS/kernel/config index 1e78db239c5..45bdfa4d317 100644 --- a/SPECS/kernel/config +++ b/SPECS/kernel/config @@ -1,6 +1,6 @@ # # Automatically generated file; DO NOT EDIT. -# Linux/x86_64 5.15.167.1 Kernel Configuration +# Linux/x86_64 5.15.169.1 Kernel Configuration # CONFIG_CC_VERSION_TEXT="gcc (GCC) 11.2.0" CONFIG_CC_IS_GCC=y diff --git a/SPECS/kernel/config_aarch64 b/SPECS/kernel/config_aarch64 index e3e322650bf..4a245e96b5a 100644 --- a/SPECS/kernel/config_aarch64 +++ b/SPECS/kernel/config_aarch64 @@ -1,6 +1,6 @@ # # Automatically generated file; DO NOT EDIT. -# Linux/arm64 5.15.167.1 Kernel Configuration +# Linux/arm64 5.15.169.1 Kernel Configuration # CONFIG_CC_VERSION_TEXT="gcc (GCC) 11.2.0" CONFIG_CC_IS_GCC=y diff --git a/SPECS/kernel/kernel.signatures.json b/SPECS/kernel/kernel.signatures.json index d5e3b8abb45..c228d0f3158 100644 --- a/SPECS/kernel/kernel.signatures.json +++ b/SPECS/kernel/kernel.signatures.json @@ -1,9 +1,9 @@ { "Signatures": { "cbl-mariner-ca-20211013.pem": "5ef124b0924cb1047c111a0ecff1ae11e6ad7cac8d1d9b40f98f99334121f0b0", - "config": "dc024483419fd8d1df7191058e01d80d7421d1c141f0bfc30f330201abb51ed3", - "config_aarch64": "000300cac16ea745e68e93e1cada7c344518d4e848e287530b2d3f1225b51e05", + "config": "94ebe79535f86190876171a2dc66175cb361be517d848a3ffb8bf33786ce0f3e", + "config_aarch64": "130a3815acb6e1b7eb6e85c1b03d8427a7b38d2a26a0257c25dd1dab9a1ce284", "sha512hmac-openssl.sh": "02ab91329c4be09ee66d759e4d23ac875037c3b56e5a598e32fd1206da06a27f", - "kernel-5.15.167.1.tar.gz": "2f529a3abf4167d1de5f7dd73043827db2c08d647d924990843ee914b0558ee0" + "kernel-5.15.169.1.tar.gz": "e74c0bb5e8485983275af9a1c8ccdc5155217e8a2b824281146df1d04f2d315e" } } diff --git a/SPECS/kernel/kernel.spec b/SPECS/kernel/kernel.spec index ddd26aec995..83cfc139716 100644 --- a/SPECS/kernel/kernel.spec +++ b/SPECS/kernel/kernel.spec @@ -27,8 +27,8 @@ Summary: Linux Kernel Name: kernel -Version: 5.15.167.1 -Release: 2%{?dist} +Version: 5.15.169.1 +Release: 1%{?dist} License: GPLv2 Vendor: Microsoft Corporation Distribution: Mariner @@ -426,6 +426,9 @@ ln -sf linux-%{uname_r}.cfg /boot/mariner.cfg %{_sysconfdir}/bash_completion.d/bpftool %changelog +* Thu Nov 14 2024 CBL-Mariner Servicing Account - 5.15.169.1-1 +- Auto-upgrade to 5.15.169.1 + * Wed Oct 23 2024 Rachel Menge - 5.15.167.1-2 - Remove Amateur Radio X.25 PLP Rose for CVE-2022-2961 diff --git a/cgmanifest.json b/cgmanifest.json index eebbb01b2b5..88137502f63 100644 --- a/cgmanifest.json +++ b/cgmanifest.json @@ -6540,8 +6540,8 @@ "type": "other", "other": { "name": "hyperv-daemons", - "version": "5.15.167.1", - "downloadUrl": "https://github.com/microsoft/CBL-Mariner-Linux-Kernel/archive/rolling-lts/mariner-2/5.15.167.1.tar.gz" + "version": "5.15.169.1", + "downloadUrl": "https://github.com/microsoft/CBL-Mariner-Linux-Kernel/archive/rolling-lts/mariner-2/5.15.169.1.tar.gz" } } }, @@ -8121,8 +8121,8 @@ "type": "other", "other": { "name": "kernel", - "version": "5.15.167.1", - "downloadUrl": "https://github.com/microsoft/CBL-Mariner-Linux-Kernel/archive/rolling-lts/mariner-2/5.15.167.1.tar.gz" + "version": "5.15.169.1", + "downloadUrl": "https://github.com/microsoft/CBL-Mariner-Linux-Kernel/archive/rolling-lts/mariner-2/5.15.169.1.tar.gz" } } }, @@ -8131,8 +8131,8 @@ "type": "other", "other": { "name": "kernel-azure", - "version": "5.15.167.1", - "downloadUrl": "https://github.com/microsoft/CBL-Mariner-Linux-Kernel/archive/rolling-lts/mariner-2/5.15.167.1.tar.gz" + "version": "5.15.169.1", + "downloadUrl": "https://github.com/microsoft/CBL-Mariner-Linux-Kernel/archive/rolling-lts/mariner-2/5.15.169.1.tar.gz" } } }, @@ -8141,8 +8141,8 @@ "type": "other", "other": { "name": "kernel-hci", - "version": "5.15.167.1", - "downloadUrl": "https://github.com/microsoft/CBL-Mariner-Linux-Kernel/archive/rolling-lts/mariner-2/5.15.167.1.tar.gz" + "version": "5.15.169.1", + "downloadUrl": "https://github.com/microsoft/CBL-Mariner-Linux-Kernel/archive/rolling-lts/mariner-2/5.15.169.1.tar.gz" } } }, @@ -8151,8 +8151,8 @@ "type": "other", "other": { "name": "kernel-headers", - "version": "5.15.167.1", - "downloadUrl": "https://github.com/microsoft/CBL-Mariner-Linux-Kernel/archive/rolling-lts/mariner-2/5.15.167.1.tar.gz" + "version": "5.15.169.1", + "downloadUrl": "https://github.com/microsoft/CBL-Mariner-Linux-Kernel/archive/rolling-lts/mariner-2/5.15.169.1.tar.gz" } } }, diff --git a/toolkit/resources/manifests/package/pkggen_core_aarch64.txt b/toolkit/resources/manifests/package/pkggen_core_aarch64.txt index b114b284798..5bcb4e41909 100644 --- a/toolkit/resources/manifests/package/pkggen_core_aarch64.txt +++ b/toolkit/resources/manifests/package/pkggen_core_aarch64.txt @@ -1,5 +1,5 @@ filesystem-1.1-20.cm2.aarch64.rpm -kernel-headers-5.15.167.1-2.cm2.noarch.rpm +kernel-headers-5.15.169.1-1.cm2.noarch.rpm glibc-2.35-7.cm2.aarch64.rpm glibc-devel-2.35-7.cm2.aarch64.rpm glibc-i18n-2.35-7.cm2.aarch64.rpm diff --git a/toolkit/resources/manifests/package/pkggen_core_x86_64.txt b/toolkit/resources/manifests/package/pkggen_core_x86_64.txt index 54602902a8e..14dce2c640f 100644 --- a/toolkit/resources/manifests/package/pkggen_core_x86_64.txt +++ b/toolkit/resources/manifests/package/pkggen_core_x86_64.txt @@ -1,5 +1,5 @@ filesystem-1.1-20.cm2.x86_64.rpm -kernel-headers-5.15.167.1-2.cm2.noarch.rpm +kernel-headers-5.15.169.1-1.cm2.noarch.rpm glibc-2.35-7.cm2.x86_64.rpm glibc-devel-2.35-7.cm2.x86_64.rpm glibc-i18n-2.35-7.cm2.x86_64.rpm diff --git a/toolkit/resources/manifests/package/toolchain_aarch64.txt b/toolkit/resources/manifests/package/toolchain_aarch64.txt index 325512f971e..b08e9abad6c 100644 --- a/toolkit/resources/manifests/package/toolchain_aarch64.txt +++ b/toolkit/resources/manifests/package/toolchain_aarch64.txt @@ -136,7 +136,7 @@ intltool-0.51.0-7.cm2.noarch.rpm itstool-2.0.6-4.cm2.noarch.rpm kbd-2.2.0-1.cm2.aarch64.rpm kbd-debuginfo-2.2.0-1.cm2.aarch64.rpm -kernel-headers-5.15.167.1-2.cm2.noarch.rpm +kernel-headers-5.15.169.1-1.cm2.noarch.rpm kmod-29-2.cm2.aarch64.rpm kmod-debuginfo-29-2.cm2.aarch64.rpm kmod-devel-29-2.cm2.aarch64.rpm diff --git a/toolkit/resources/manifests/package/toolchain_x86_64.txt b/toolkit/resources/manifests/package/toolchain_x86_64.txt index 387de6239c0..e0ab7d43b6c 100644 --- a/toolkit/resources/manifests/package/toolchain_x86_64.txt +++ b/toolkit/resources/manifests/package/toolchain_x86_64.txt @@ -141,8 +141,8 @@ intltool-0.51.0-7.cm2.noarch.rpm itstool-2.0.6-4.cm2.noarch.rpm kbd-2.2.0-1.cm2.x86_64.rpm kbd-debuginfo-2.2.0-1.cm2.x86_64.rpm -kernel-cross-headers-5.15.167.1-2.cm2.noarch.rpm -kernel-headers-5.15.167.1-2.cm2.noarch.rpm +kernel-cross-headers-5.15.169.1-1.cm2.noarch.rpm +kernel-headers-5.15.169.1-1.cm2.noarch.rpm kmod-29-2.cm2.x86_64.rpm kmod-debuginfo-29-2.cm2.x86_64.rpm kmod-devel-29-2.cm2.x86_64.rpm From 38349b12fffc315aa5bf14e44eec9a5a9182b476 Mon Sep 17 00:00:00 2001 From: CBL-Mariner Servicing Account Date: Thu, 14 Nov 2024 05:15:40 +0000 Subject: [PATCH 2/3] Apply config changes to AMD64 --- SPECS/kernel-azure/config | 3 +++ SPECS/kernel-azure/kernel-azure.signatures.json | 2 +- SPECS/kernel/config | 3 +++ SPECS/kernel/kernel.signatures.json | 2 +- 4 files changed, 8 insertions(+), 2 deletions(-) diff --git a/SPECS/kernel-azure/config b/SPECS/kernel-azure/config index 4631cc56e99..c137893bef8 100644 --- a/SPECS/kernel-azure/config +++ b/SPECS/kernel-azure/config @@ -6771,6 +6771,9 @@ CONFIG_TRUSTED_KEYS=m CONFIG_ENCRYPTED_KEYS=m # CONFIG_KEY_DH_OPERATIONS is not set CONFIG_SECURITY_DMESG_RESTRICT=y +CONFIG_PROC_MEM_ALWAYS_FORCE=y +# CONFIG_PROC_MEM_FORCE_PTRACE is not set +# CONFIG_PROC_MEM_NO_FORCE is not set CONFIG_SECURITY=y CONFIG_SECURITYFS=y CONFIG_SECURITY_NETWORK=y diff --git a/SPECS/kernel-azure/kernel-azure.signatures.json b/SPECS/kernel-azure/kernel-azure.signatures.json index d865b41c6b0..1909f10bacf 100644 --- a/SPECS/kernel-azure/kernel-azure.signatures.json +++ b/SPECS/kernel-azure/kernel-azure.signatures.json @@ -1,7 +1,7 @@ { "Signatures": { "cbl-mariner-ca-20211013.pem": "5ef124b0924cb1047c111a0ecff1ae11e6ad7cac8d1d9b40f98f99334121f0b0", - "config": "e0a9d6b3f4234ce45367dbe3d903639320a1e527a941248c0f84f37e12fdaac5", + "config": "c1a986285c252995287d11b26ff11988ee1a3c471afaf49afcee1bfacf7f7bb1", "config_aarch64": "45a4e313a3777a6003d955e655fa8deaf8af3a8939df825b39b568975357da87", "sha512hmac-openssl.sh": "02ab91329c4be09ee66d759e4d23ac875037c3b56e5a598e32fd1206da06a27f", "kernel-5.15.169.1.tar.gz": "e74c0bb5e8485983275af9a1c8ccdc5155217e8a2b824281146df1d04f2d315e" diff --git a/SPECS/kernel/config b/SPECS/kernel/config index 45bdfa4d317..7340c7f3092 100644 --- a/SPECS/kernel/config +++ b/SPECS/kernel/config @@ -6806,6 +6806,9 @@ CONFIG_TRUSTED_KEYS=m CONFIG_ENCRYPTED_KEYS=m # CONFIG_KEY_DH_OPERATIONS is not set CONFIG_SECURITY_DMESG_RESTRICT=y +CONFIG_PROC_MEM_ALWAYS_FORCE=y +# CONFIG_PROC_MEM_FORCE_PTRACE is not set +# CONFIG_PROC_MEM_NO_FORCE is not set CONFIG_SECURITY=y CONFIG_SECURITYFS=y CONFIG_SECURITY_NETWORK=y diff --git a/SPECS/kernel/kernel.signatures.json b/SPECS/kernel/kernel.signatures.json index c228d0f3158..a0569205a3a 100644 --- a/SPECS/kernel/kernel.signatures.json +++ b/SPECS/kernel/kernel.signatures.json @@ -1,7 +1,7 @@ { "Signatures": { "cbl-mariner-ca-20211013.pem": "5ef124b0924cb1047c111a0ecff1ae11e6ad7cac8d1d9b40f98f99334121f0b0", - "config": "94ebe79535f86190876171a2dc66175cb361be517d848a3ffb8bf33786ce0f3e", + "config": "40be0e8793721747449f2b75878d51d7155ce00d179d9df2c07e9c3d695da230", "config_aarch64": "130a3815acb6e1b7eb6e85c1b03d8427a7b38d2a26a0257c25dd1dab9a1ce284", "sha512hmac-openssl.sh": "02ab91329c4be09ee66d759e4d23ac875037c3b56e5a598e32fd1206da06a27f", "kernel-5.15.169.1.tar.gz": "e74c0bb5e8485983275af9a1c8ccdc5155217e8a2b824281146df1d04f2d315e" From 50e4ffb125c39989b9ede12620a839da3a7de863 Mon Sep 17 00:00:00 2001 From: CBL-Mariner Servicing Account Date: Thu, 14 Nov 2024 05:15:48 +0000 Subject: [PATCH 3/3] Apply config changes to ARM64 --- SPECS/kernel-azure/config_aarch64 | 3 +++ SPECS/kernel-azure/kernel-azure.signatures.json | 2 +- SPECS/kernel/config_aarch64 | 3 +++ SPECS/kernel/kernel.signatures.json | 2 +- 4 files changed, 8 insertions(+), 2 deletions(-) diff --git a/SPECS/kernel-azure/config_aarch64 b/SPECS/kernel-azure/config_aarch64 index aa1df1e2a87..ce9286bd26a 100644 --- a/SPECS/kernel-azure/config_aarch64 +++ b/SPECS/kernel-azure/config_aarch64 @@ -8934,6 +8934,9 @@ CONFIG_TRUSTED_KEYS=m CONFIG_ENCRYPTED_KEYS=m # CONFIG_KEY_DH_OPERATIONS is not set CONFIG_SECURITY_DMESG_RESTRICT=y +CONFIG_PROC_MEM_ALWAYS_FORCE=y +# CONFIG_PROC_MEM_FORCE_PTRACE is not set +# CONFIG_PROC_MEM_NO_FORCE is not set CONFIG_SECURITY=y CONFIG_SECURITYFS=y CONFIG_SECURITY_NETWORK=y diff --git a/SPECS/kernel-azure/kernel-azure.signatures.json b/SPECS/kernel-azure/kernel-azure.signatures.json index 1909f10bacf..e71c632f84b 100644 --- a/SPECS/kernel-azure/kernel-azure.signatures.json +++ b/SPECS/kernel-azure/kernel-azure.signatures.json @@ -2,7 +2,7 @@ "Signatures": { "cbl-mariner-ca-20211013.pem": "5ef124b0924cb1047c111a0ecff1ae11e6ad7cac8d1d9b40f98f99334121f0b0", "config": "c1a986285c252995287d11b26ff11988ee1a3c471afaf49afcee1bfacf7f7bb1", - "config_aarch64": "45a4e313a3777a6003d955e655fa8deaf8af3a8939df825b39b568975357da87", + "config_aarch64": "4ac4d0d5cb74ba8d975e423209aa0cf68340cd4fc931156aecb11a90591ef255", "sha512hmac-openssl.sh": "02ab91329c4be09ee66d759e4d23ac875037c3b56e5a598e32fd1206da06a27f", "kernel-5.15.169.1.tar.gz": "e74c0bb5e8485983275af9a1c8ccdc5155217e8a2b824281146df1d04f2d315e" } diff --git a/SPECS/kernel/config_aarch64 b/SPECS/kernel/config_aarch64 index 4a245e96b5a..14cf327760d 100644 --- a/SPECS/kernel/config_aarch64 +++ b/SPECS/kernel/config_aarch64 @@ -8953,6 +8953,9 @@ CONFIG_TRUSTED_KEYS=m CONFIG_ENCRYPTED_KEYS=m # CONFIG_KEY_DH_OPERATIONS is not set CONFIG_SECURITY_DMESG_RESTRICT=y +CONFIG_PROC_MEM_ALWAYS_FORCE=y +# CONFIG_PROC_MEM_FORCE_PTRACE is not set +# CONFIG_PROC_MEM_NO_FORCE is not set CONFIG_SECURITY=y CONFIG_SECURITYFS=y CONFIG_SECURITY_NETWORK=y diff --git a/SPECS/kernel/kernel.signatures.json b/SPECS/kernel/kernel.signatures.json index a0569205a3a..d159993cbd0 100644 --- a/SPECS/kernel/kernel.signatures.json +++ b/SPECS/kernel/kernel.signatures.json @@ -2,7 +2,7 @@ "Signatures": { "cbl-mariner-ca-20211013.pem": "5ef124b0924cb1047c111a0ecff1ae11e6ad7cac8d1d9b40f98f99334121f0b0", "config": "40be0e8793721747449f2b75878d51d7155ce00d179d9df2c07e9c3d695da230", - "config_aarch64": "130a3815acb6e1b7eb6e85c1b03d8427a7b38d2a26a0257c25dd1dab9a1ce284", + "config_aarch64": "39f0d1a94147c0d1a8ca7cd0f415f8dd85a6d6cc66855c3f092a4660762114c0", "sha512hmac-openssl.sh": "02ab91329c4be09ee66d759e4d23ac875037c3b56e5a598e32fd1206da06a27f", "kernel-5.15.169.1.tar.gz": "e74c0bb5e8485983275af9a1c8ccdc5155217e8a2b824281146df1d04f2d315e" }